DeBaat

16 juli 2012

KAPE,

FANTASTISCH!!!

Het doet het weer. Echt enorm bedankt!!! Ik zat echt met mijn handen in het haar. Bedankt voor de snelle en professionele reacties. Ik zal jullie site aanbevelen bij eenieder die PC problemen heeft!

Echt helemaal top!

PS. Na het lezen van de logfiles nog andere tips voor me?

16 juli 2012

KAPE,

Heb weer even de problemen gecheckt. Wat blijkt...

In Internet Explorer werkt Hotmail verzenden en Marktplaats weer

Maar...

In Google Chrome nog niet... :-(

Maar je zit op de goede weg!!

Nog ideeen over wat te doen?

Alvast bedankt!

Wilco

16 juli 2012

KAPE,

Hierbij de log file van ComboFix

ComboFix 12-07-14.01 - Familie Batelaan 16-07-2012 18:37:30.3.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3959.2097 [GMT 2:00]

Gestart vanuit: c:\users\Familie Batelaan\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Familie Batelaan\Desktop\CFScript.txt.txt

AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}

SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files (x86)\Panda Security

c:\programdata\AVAST Software

c:\programdata\AVAST Software\Avast\aswResp.dat

c:\programdata\AVAST Software\Avast\avast5.ini

c:\programdata\AVAST Software\Avast\BehaviorShield.ini

c:\programdata\AVAST Software\Avast\chest\index.xml

c:\programdata\AVAST Software\Avast\db1cc0befdad36fda-a687918.dat

c:\programdata\AVAST Software\Avast\db1cc0c839dccc204-448f3e20.dat

c:\programdata\AVAST Software\Avast\EmailShield.ini

c:\programdata\AVAST Software\Avast\FileInfo2.db

c:\programdata\AVAST Software\Avast\FileSystemShield.ini

c:\programdata\AVAST Software\Avast\HtmlData\Blocked.htm

c:\programdata\AVAST Software\Avast\HtmlData\image001.png

c:\programdata\AVAST Software\Avast\IMShield.ini

c:\programdata\AVAST Software\Avast\Log.db

c:\programdata\AVAST Software\Avast\log\AshWebSv.ws

c:\programdata\AVAST Software\Avast\log\aswAr.log

c:\programdata\AVAST Software\Avast\log\aswAr1.log

c:\programdata\AVAST Software\Avast\log\Chest.log

c:\programdata\AVAST Software\Avast\log\HtmlRemoteContent.log

c:\programdata\AVAST Software\Avast\log\HtmlRemoteContent.old

c:\programdata\AVAST Software\Avast\log\Mail.log

c:\programdata\AVAST Software\Avast\log\nshield.log

c:\programdata\AVAST Software\Avast\log\selfdef.log

c:\programdata\AVAST Software\Avast\log\Setup.log

c:\programdata\AVAST Software\Avast\log\usntr.log

c:\programdata\AVAST Software\Avast\NetworkShield.ini

c:\programdata\AVAST Software\Avast\P2PShield.ini

c:\programdata\AVAST Software\Avast\report\BehaviorShield.txt

c:\programdata\AVAST Software\Avast\report\EmailShield.txt

c:\programdata\AVAST Software\Avast\report\FileSystemShield.txt

c:\programdata\AVAST Software\Avast\report\IMShield.txt

c:\programdata\AVAST Software\Avast\report\NetworkShield.txt

c:\programdata\AVAST Software\Avast\report\P2PShield.txt

c:\programdata\AVAST Software\Avast\report\ScriptShield.txt

c:\programdata\AVAST Software\Avast\report\WebShield.txt

c:\programdata\AVAST Software\Avast\ScriptShield.ini

c:\programdata\AVAST Software\Avast\snx_gconfig.xml

c:\programdata\AVAST Software\Avast\snx_lconfig.xml

c:\programdata\AVAST Software\Avast\sounds\fw_question.wav

c:\programdata\AVAST Software\Avast\sounds\scan_completed.wav

c:\programdata\AVAST Software\Avast\sounds\threat_detected.wav

c:\programdata\AVAST Software\Avast\sounds\virus_db_updated.wav

c:\programdata\AVAST Software\Avast\URL.db

c:\programdata\AVAST Software\Avast\WebShield.ini

c:\programdata\F-Secure

c:\programdata\F-Secure\Daas2\cert\fsc (revoke hq).crl

c:\users\Familie Batelaan\AppData\Roaming\Ad-Aware Antivirus

c:\users\Familie Batelaan\AppData\Roaming\Ad-Aware Antivirus\language.xml

c:\users\Familie Batelaan\AppData\Roaming\Ad-Aware Antivirus\Logs\20120714T184706.230135PID3424\GuiFramework.log

c:\users\Familie Batelaan\AppData\Roaming\f-secure

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCall.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla17.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla18.exe

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla19.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla2.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla20.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla21.dll

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseCustomCalla21.exe

c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP\WiseData.ini

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-16 to 2012-07-16 ))))))))))))))))))))))))))))))

.

2012-07-16 16:51 . 2012-07-16 16:51 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-16 11:33 . 2012-06-18 01:12 9013136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6D53907-5C5A-4D18-9AA7-A8ECB0232FDD}\mpengine.dll

2012-07-15 21:03 . 2012-07-15 21:03 927800 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{72DB315E-0B1D-4365-A9E4-3F246C378ACC}\gapaengine.dll

2012-07-15 21:03 . 2012-05-30 19:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A0ACCEB1-E10A-49E3-B647-604ED414CC83}\mpengine.dll

2012-07-15 21:02 . 2012-07-15 21:02 -------- d-----w- c:\program files (x86)\Microsoft Security Client

2012-07-15 21:02 . 2012-07-15 21:02 -------- d-----w- c:\program files\Microsoft Security Client

2012-07-15 20:29 . 2012-07-15 20:29 2 --shatr- c:\windows\winstart.bat

2012-07-15 20:29 . 2012-07-15 20:29 -------- d-----w- C:\backreg

2012-07-15 20:29 . 2012-07-15 20:29 -------- d-----w- c:\users\Familie Batelaan\AppData\Roaming\Regrun

2012-07-15 20:26 . 2012-07-15 20:26 -------- d-----w- c:\program files (x86)\Greatis

2012-07-15 20:06 . 2012-07-15 20:06 -------- d-----w- c:\program files (x86)\Microsoft Silverlight

2012-07-15 19:03 . 2012-07-15 19:03 30496 ----a-w- c:\windows\system32\drivers\hitmanpro36.sys

2012-07-15 12:23 . 2012-07-15 12:23 -------- d-----w- c:\users\Familie Batelaan\AppData\Roaming\Malwarebytes

2012-07-15 12:23 . 2012-07-15 12:23 -------- d-----w- c:\programdata\Malwarebytes

2012-07-15 12:23 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-07-15 12:23 . 2012-07-15 12:23 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-07-15 12:15 . 2012-07-15 12:15 388096 ----a-r- c:\users\Familie Batelaan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-07-15 12:15 . 2012-07-15 12:15 -------- d-----w- c:\program files (x86)\Trend Micro

2012-07-14 21:52 . 2012-07-14 21:52 -------- d-----w- c:\programdata\Simply Super Software

2012-07-14 21:46 . 2012-07-15 12:54 -------- d-----w- c:\programdata\clp

2012-07-14 21:46 . 2012-07-14 21:46 -------- d-----w- c:\users\Familie Batelaan\AppData\Roaming\Fighters

2012-07-14 21:45 . 2012-07-14 21:45 -------- d-----w- c:\programdata\Common Toolkit Suite

2012-07-14 21:45 . 2012-07-15 20:02 -------- d-----w- c:\programdata\Fighters

2012-07-14 19:39 . 2012-07-14 21:19 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2012-07-14 19:39 . 2012-07-14 19:42 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy

2012-07-14 19:21 . 2012-07-03 16:21 41224 ----a-w- c:\windows\avastSS.scr

2012-07-14 19:21 . 2012-07-03 16:21 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe

2012-07-14 18:49 . 2012-07-14 18:49 -------- d-----w- c:\programdata\HitmanPro

2012-07-14 18:47 . 2012-07-14 18:47 -------- d-----w- c:\program files (x86)\MSSOAP

2012-07-14 18:20 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll

2012-07-14 18:20 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll

2012-07-11 21:20 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys

2012-07-11 07:11 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll

2012-06-24 12:55 . 2012-06-24 12:57 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR

2012-06-24 12:55 . 2012-06-24 12:55 -------- d-----w- c:\program files (x86)\devolo

2012-06-23 07:52 . 2012-06-23 07:52 -------- d-----w- c:\program files (x86)\Dell Digital Delivery

2012-06-22 08:23 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-22 08:23 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll

2012-06-22 08:23 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll

2012-06-22 08:23 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-22 08:23 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll

2012-06-22 08:23 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll

2012-06-22 08:23 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll

2012-06-22 08:23 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-22 08:23 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe

2012-06-18 20:37 . 2012-06-18 20:37 -------- d-----w- c:\program files (x86)\Oracle

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-11 22:02 . 2012-03-31 16:40 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-11 22:02 . 2011-05-12 20:29 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-05-31 10:25 . 2011-05-06 15:12 279656 ------w- c:\windows\system32\MpSigStub.exe

2012-05-28 19:19 . 2012-05-28 19:19 172080 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS

2012-05-04 17:29 . 2012-06-09 10:08 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2012-05-04 17:29 . 2012-01-01 09:51 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-05-04 11:06 . 2012-06-13 18:31 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-05-04 10:03 . 2012-06-13 18:31 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-05-04 10:03 . 2012-06-13 18:31 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2012-05-01 05:40 . 2012-06-13 18:31 209920 ----a-w- c:\windows\system32\profsvc.dll

2012-04-28 03:55 . 2012-06-13 18:30 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-04-26 05:41 . 2012-06-13 18:31 77312 ----a-w- c:\windows\system32\rdpwsx.dll

2012-04-26 05:41 . 2012-06-13 18:31 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-04-26 05:34 . 2012-06-13 18:31 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-04-24 05:37 . 2012-06-13 18:30 184320 ----a-w- c:\windows\system32\cryptsvc.dll

2012-04-24 05:37 . 2012-06-13 18:30 140288 ----a-w- c:\windows\system32\cryptnet.dll

2012-04-24 05:37 . 2012-06-13 18:30 1462272 ----a-w- c:\windows\system32\crypt32.dll

2012-04-24 04:36 . 2012-06-13 18:30 1158656 ----a-w- c:\windows\SysWow64\crypt32.dll

2012-04-24 04:36 . 2012-06-13 18:30 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll

2012-04-24 04:36 . 2012-06-13 18:30 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll

2012-04-22 17:32 . 2012-04-22 17:32 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

2012-04-22 17:32 . 2012-04-22 17:32 161792 ----a-w- c:\windows\SysWow64\msls31.dll

2012-04-22 17:32 . 2012-04-22 17:32 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll

2012-04-22 17:32 . 2012-04-22 17:32 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2012-04-22 17:32 . 2012-04-22 17:32 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

2012-04-22 17:32 . 2012-04-22 17:32 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

2012-04-22 17:32 . 2012-04-22 17:32 74752 ----a-w- c:\windows\SysWow64\iesetup.dll

2012-04-22 17:32 . 2012-04-22 17:32 63488 ----a-w- c:\windows\SysWow64\tdc.ocx

2012-04-22 17:32 . 2012-04-22 17:32 367104 ----a-w- c:\windows\SysWow64\html.iec

2012-04-22 17:32 . 2012-04-22 17:32 420864 ----a-w- c:\windows\SysWow64\vbscript.dll

2012-04-22 17:32 . 2012-04-22 17:32 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll

2012-04-22 17:32 . 2012-04-22 17:32 152064 ----a-w- c:\windows\SysWow64\wextract.exe

2012-04-22 17:32 . 2012-04-22 17:32 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

2012-04-22 17:32 . 2012-04-22 17:32 35840 ----a-w- c:\windows\SysWow64\imgutil.dll

2012-04-22 17:32 . 2012-04-22 17:32 11776 ----a-w- c:\windows\SysWow64\mshta.exe

2012-04-22 17:32 . 2012-04-22 17:32 101888 ----a-w- c:\windows\SysWow64\admparse.dll

2012-04-22 17:32 . 2012-04-22 17:32 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

2012-04-22 17:32 . 2012-04-22 17:32 222208 ----a-w- c:\windows\system32\msls31.dll

2012-04-22 17:32 . 2012-04-22 17:32 12288 ----a-w- c:\windows\system32\mshta.exe

2012-04-22 17:32 . 2012-04-22 17:32 49664 ----a-w- c:\windows\system32\imgutil.dll

2012-04-22 17:32 . 2012-04-22 17:32 135168 ----a-w- c:\windows\system32\IEAdvpack.dll

2012-04-22 17:32 . 2012-04-22 17:32 114176 ----a-w- c:\windows\system32\admparse.dll

2012-04-22 17:32 . 2012-04-22 17:32 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2012-04-22 17:32 . 2012-04-22 17:32 76800 ----a-w- c:\windows\system32\tdc.ocx

2012-04-22 17:32 . 2012-04-22 17:32 48640 ----a-w- c:\windows\system32\mshtmler.dll

2012-04-22 17:32 . 2012-04-22 17:32 448512 ----a-w- c:\windows\system32\html.iec

2012-04-22 17:32 . 2012-04-22 17:32 111616 ----a-w- c:\windows\system32\iesysprep.dll

2012-04-22 17:32 . 2012-04-22 17:32 85504 ----a-w- c:\windows\system32\iesetup.dll

2012-04-22 17:32 . 2012-04-22 17:32 30720 ----a-w- c:\windows\system32\licmgr10.dll

2012-04-22 17:32 . 2012-04-22 17:32 165888 ----a-w- c:\windows\system32\iexpress.exe

2012-04-22 17:32 . 2012-04-22 17:32 160256 ----a-w- c:\windows\system32\wextract.exe

2012-04-22 17:32 . 2012-04-22 17:32 603648 ----a-w- c:\windows\system32\vbscript.dll

.

((((((((((((((((((((((((((((( SnapShot@2012-07-15_22.40.43 )))))))))))))))))))))))))))))))))))))))))

.

+ 2009-07-14 04:54 . 2012-07-16 16:31 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-07-14 04:54 . 2012-07-15 20:51 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2012-02-26 14:13 . 2012-07-16 14:59 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat

- 2012-02-26 14:13 . 2012-07-15 09:56 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat

+ 2011-05-06 15:39 . 2012-07-16 16:30 54488 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10 . 2012-07-16 16:30 39322 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2011-05-06 14:34 . 2012-07-16 16:30 17958 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1141075638-877907513-3714423493-1000_UserData.bin

+ 2011-05-06 17:19 . 2012-07-16 16:23 4241 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat

- 2011-05-06 17:19 . 2012-07-15 20:46 4241 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat

- 2012-07-15 20:48 . 2012-07-15 20:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2012-07-16 16:28 . 2012-07-16 16:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2012-07-15 20:48 . 2012-07-15 20:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2012-07-16 16:28 . 2012-07-16 16:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2009-07-14 04:54 . 2012-07-15 20:51 540672 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-07-14 04:54 . 2012-07-16 16:31 540672 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-07-14 04:54 . 2012-07-16 16:31 344064 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-07-14 05:01 . 2012-07-15 20:46 386028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-07-14 05:01 . 2012-07-16 16:23 386028 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

- 2011-05-18 19:12 . 2012-07-13 21:42 1214064 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat

+ 2011-05-18 19:12 . 2012-07-16 16:23 1214064 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat

+ 2011-05-06 15:51 . 2012-07-16 16:23 21562452 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1141075638-877907513-3714423493-1000-4096.dat

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OfficeSyncProcess"="c:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2011-07-21 718720]

"Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-08-03 202024]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-06-08 284696]

"SAOB Monitor"="c:\program files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe" [2010-11-16 2536752]

"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2010-12-20 5571928]

"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2010-08-19 487562]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-04-04 35736]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"KeePass 2 PreLoad"="c:\program files (x86)\KeePass Password Safe 2\KeePass.exe" [2011-10-19 1807360]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]

"QuickTime Task"="c:\program files (x86)\Magic Video Converter\codec\quicktime\QTTask.exe" [2011-10-24 421888]

"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 1828136]

"ccApp"="c:\program files (x86)\Common Files\Symantec Shared\ccApp.exe" [2008-01-31 115560]

"vptray"="c:\progra~2\SYMANT~1\VPTray.exe" [2008-10-23 136080]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLinkedConnections"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-11 250056]

R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]

R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-03-30 53800]

R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2010-07-15 16776]

R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]

R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2010-07-15 9096]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]

R3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-12-01 250984]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-03-21 452200]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-06 1255736]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]

S0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273);c:\windows\system32\DRIVERS\tdrpm273.sys [2011-05-06 1263200]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]

S2 afcdpsrv;Acronis Nonstop Backup-service ;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2011-05-06 3246040]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-06-01 203264]

S2 DellDigitalDelivery;Dell Digital Delivery Service;c:\program files (x86)\Dell Digital Delivery\DeliveryService.exe [2012-06-19 173056]

S2 DevoloNetworkService;devolo Network Service;c:\program files (x86)\devolo\dlan\devolonetsvc.exe [2012-02-28 3128856]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-06-08 13336]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]

S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys [2012-01-31 34048]

S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]

S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2011-05-06 285280]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-06-01 6857728]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-06-01 264192]

S3 BcmVWL;Broadcom Virtual Wireless;c:\windows\system32\DRIVERS\bcmvwl64.sys [2010-02-02 20984]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-30 35104]

S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2010-08-12 175168]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-05-16 138912]

S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-07-24 82816]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 22:02]

.

2012-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1141075638-877907513-3714423493-1000Core.job

- c:\users\Familie Batelaan\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-21 14:55]

.

2012-07-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1141075638-877907513-3714423493-1000UA.job

- c:\users\Familie Batelaan\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-21 14:55]

.

2012-07-14 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]

.

2012-07-16 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Broadcom Wireless Manager UI"="c:\program files\Dell\DW WLAN Card\WLTRAY.exe" [2010-02-02 5712896]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-06-17 487424]

"Acronis Scheduler2Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2010-12-20 390512]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.nl/

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 62.179.104.196 213.46.228.196

DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB

DPF: {682C59F5-478C-4421-9070-AD170D143B77} - hxxp://www.dell.com/support/troubleshooting/Content/Ode/pcd86.cab

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-07-16 19:08:33

ComboFix-quarantined-files.txt 2012-07-16 17:08

ComboFix2.txt 2012-07-16 11:56

ComboFix3.txt 2012-07-15 22:57

.

Pre-Run: 67.698.892.800 bytes beschikbaar

Post-Run: 67.641.552.896 bytes beschikbaar

.

- - End Of File - - C8847F2C51D0B816638E02D75563B945

Groet

Wilco

16 juli 2012

Beste KAPE,

Tjah, je probeert van alles he. Momenteel staan alleen Symantec en Microsoft Security Essentials actief. De rest is eraf. Heb Combofix aan het werk gezet. Bij gereed werkte de browsers niet meer, kreeg een melding over Register sleutels.... Computer opnieuw opgestart, daarna werkte het weer.

ComboFix 12-07-14.01 - Familie Batelaan 16-07-2012 13:37:26.2.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3959.1761 [GMT 2:00]

Gestart vanuit: c:\users\Familie Batelaan\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Familie Batelaan\Desktop\CFScript.txt

AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}

SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

.

FILE ::

"c:\program files (x86)\Ant.com\IE add-on\AntUpdaterService.exe"

"c:\windows\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files (x86)\Ant.com\IE add-on\AntUpdaterService.exe

c:\programdata\Babylon

c:\users\Familie Batelaan\AppData\Roaming\Babylon

c:\users\Familie Batelaan\AppData\Roaming\Babylon\log_file.txt

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Service_AntUpdaterService

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-16 to 2012-07-16 ))))))))))))))))))))))))))))))

.

2012-07-16 11:45 . 2012-07-16 11:45 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-16 11:33 . 2012-06-18 01:12 9013136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6D53907-5C5A-4D18-9AA7-A8ECB0232FDD}\mpengine.dll

2012-07-15 21:03 . 2012-07-15 21:03 927800 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{72DB315E-0B1D-4365-A9E4-3F246C378ACC}\gapaengine.dll

2012-07-15 21:03 . 2012-05-30 19:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A0ACCEB1-E10A-49E3-B647-604ED414CC83}\mpengine.dll

2012-07-15 21:02 . 2012-07-15 21:02 -------- d-----w- c:\program files (x86)\Microsoft Security Client

2012-07-15 21:02 . 2012-07-15 21:02 -------- d-----w- c:\program files\Microsoft Security Client

2012-07-15 20:33 . 2012-07-15 20:33 -------- d-----w- c:\program files (x86)\RegCleaner